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■ Abstract. Bruinier and Yang conjectured a formula for intersection numbers on an arith- 
I metic Hilbert modular surface, and as a consequence obtained a conjectural formula for 

CsJ ■ CM(i<').Gi under strong assumptions on the ramification in K. Yang later proved this con- 

^ \ jecture under slightly stronger assumptions on the ramification. In recent work, Lauter and 

Q ■ Viray proved a different formula for CM(/v).Gi for primitive quartic CM fields with a mild 

\ assumption, using a method of proof independent from that of Yang. In this paper we show 

that these two formulas agree, for a class of primitive quartic CM fields which is slightly 
larger than the intersection of the fields considered by Yang and Lauter and Viray. Further- 
more, the proof that these formulas agree does not rely on the results of Yang or Lauter and 
\ Viray. As a consequence of our proof, we conclude that the Bruinier- Yang formula holds for 

■ a slightly largely class of quartic CM fields K than what was proved by Yang, since it agrees 
with the Lauter- Viray formula, which is proved in those cases. The factorization of these 
intersection numbers has applications to cryptography: precise formulas for them allow one 
to compute the denominators of Igusa class polynomials, which has important applications 
to the construction of genus 2 curves for use in cryptography. 



in 



1. Introduction 



> 
oo 

^ ■ In this paper we study the relationship between two formulas proved for arithmetic inter- 

section numbers on the Siegel moduli space of principally polarized abelian surfaces. Specif- 
ically, these are formulas for the arithmetic intersection of the CM points of denoted 
by CM(i^'), with the Humbert surface Gi, which parametrizes abelian surfaces isomorphic 
to a product of elliptic curves with the product polarization; the £-part of this arithmetic 
intersection number is denoted (CM(i^').Gi)^. 
^ \ The study of these particular intersection numbers was largely motivated by applications 

■ to cryptography. In order to generate genus 2 curves over a finite field whose Jacobians 

have prime order, the CM method proceeds by computing the minimal polynomials of the 
invariants of the genus 2 curves with CM by a primitive quartic CM field K. These minimal 
polynomials are analogous to the Hilbert class polynomials for imaginary quadratic fields 
K. Indeed, Igusa defined a collection of invariants for genus 2 curves and proved expressions 
for them in terms of quotients of Siegel modular forms. For genus 2 curves with complex 
multiplication (CM) by a primitive quartic CM field these invariants lie in the Hilbert 
class field of the reflex field of and their minimal polynomials, Igusa class polynomials, 
have coefficients which are rational, not necessarily integral as is the case for Hilbert class 
polynomials related to invariants of elliptic curves. 



The second author was supported by NSF grant DMS-1103831. The fourth author was partially supported 
by NSF grant DMS-1069236 and by a NSERC PGSD grant. The last author was partially supported by 
NSF grant DMS-1002933 and ICERM. 
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Ignoring cancellation with numerators, the primes which appear in the denominators of 
Igusa class polynomials are those which appear in (CM(i^).Gi), the arithmetic intersection 
on the Siegel moduli space of the divisor of the Siegel modular form xio with the CM points 
of K. In [GL07] . it was proved that these primes are those I for which there is a solution to 
an Embedding Problem, that is, there exists an embedding of Ok into M2(B^ oo) with certain 
properties. Studying this embedding problem, [GL07j gave a bound on the primes which 
can appear, and [GLllj gave a bound on the powers to which they can appear. 

At the same time, Bruinier and Yang, using methods from Arakelov intersection theory, 
gave a conjectural exact formula for the factorization of the denominators under certain 
conditions on the ramification in the primitive quartic CM field K |BY06] . They assume 
that the discriminant of K is D^D, where D and D are both primes congruent to 1 (mod 4). 
In |YanlOllYanj . Yang proved the conjectured intersection formula assuming the ring of 
integers of K is generated by one element over the ring of integers of the real quadratic 
subfield. Yang's proof uses results of Gross-Keating, and then computes local densities by 
evaluating certain local integrals over the quaternions. 

In practice, very few primitive quartic CM fields have ramification of such restricted form. 
In [GJLL"*"!!] . Grundman, Johnson-Leung, Salerno, Wittenborn, and the third and last 
author studied all 13 quartic cyclic CM fields in van Wamelen's tables of CM genus 2 curves 
defined over Q, compared denominators with the number of solutions to the Embedding 
Problem and Bruinier and Yang's formula, and found that the Bruinier- Yang formula does 
not hold in general as stated when the assumptions on the ramification of K are relaxed. For 
applications to the computation of genus 2 curves for cryptography, it is important to have 
a precise formula for the denominators of Igusa class polynomials which holds for general 
primitive quartic CM fields. 

In |LV] . the third and last author proved a formula for {CM{K).Gi) for primitive quartic 
CM fields K with almost no assumptions on K. A simplified version of this formula holds 
with an extra mild assumption. The proof of their formula follows from parameterizing 
solutions to the Embedding Problem by pairs of endomorphisms of a supersingular elliptic 
curve E, x,u & End(-E') with a fixed norm and trace. This, in turn, is related to a counting 
problem studied by Gross and Zagier in their formula for the factorization of differences of 
singular moduli. 

The formula given by Bruinier and Yang is strikingly similar to the simplified version of 
the formula in |LV] . Indeed, both formulas involve two nested sums where the summand is 
a product that includes the number of ideals of a given norm. However, the Bruinier- Yang 
formula counts ideals in a quartic CM field, whereas the Lauter-Viray formula counts ideals 
in an imaginary quadratic order. 

In this paper, we show that the formulas of Bruinier- Yang (BY) and Lauter-Viray (LV) 
agree, without using that the formulas compute the same arithmetic intersection number. 
As a consequence of our result, we conclude that the BY formula holds for a slightly larger 
class of quartic CM fields K than what was proved by Yang. See §3 for more details. 

1.1. Idea of proof. The BY formula sums over elements in E, the real quadratic subfield 
of K, the reflex field of K, counting the number of ideals of K with certain norms, with a 
certain multiplicity. The LV formula sums over certain integers which turn out to be in one- 
to-one correspondence with the elements of E which arise in BY, under the assumptions on 
the ramification of K (see Proposition 15. 3p . For each such integer n in the LV formula, two 
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related imaginary quadratic fields are defined, with suborders of discriminants du = duin) 
and dx = dx{n) respectively. The LV formula counts ideals in + a/3^)/2] with norm 

equal to iV, a quantity related to n, with certain multiplicities. The heart of our proof of the 
equality of these two formulas is Proposition 16.71 which shows how the splitting behavior of 
certain primes in the quadratic extension K/F is related to the splitting behavior of certain 
primes in the quadratic extensions Q(a/3^) and Q(a/3^). Thus the results of this paper can 
be viewed as a kind of "reciprocity" between splitting behavior of certain primes in different 
quadratic extensions. The resulting equality of local factors in the BY and LV formulas also 
involves the multiplicities which appear in the LV formula arising from genus theory, and 
indeed our proofs rely heavily on computations of related Hilbert symbols. 

1.2. Outline of paper. In §§2]and[21 we precisely state the BY formula and the LV formula, 
respectively. We also prove that these formulas can be expressed as a product of local factors, 
which will be instrumental in the proof of our main result. 

Both formulas rely on a relative integral basis for the ring of integers of K over the ring 
of integers of the real quadratic subfield F. In ^ we give the possibilities for this integral 
basis under the assumption that D is prime and D is squarefree. 

We precisely state our main result in §S] and begin the proof by showing that the BY 
formula and LV formula both sum over the same indices. The crux of the proof is in ^ 
where we show that the summands in the BY formula and LV formula agree by comparing 
the local factors. 

L3. Notation. Let F/Q denote a real quadratic field, and let 

D = Disc^/Q(C^). 

Let A,B E^Z be such that A + bVd e Op and K = F{^A + By/D) is a totally imaginary 
quadratic extension of F. Throughout this paper, K will be assumed to be a primitive quartic 
CM field, which is the case if it is either non-Galois or Galois cyclic |Shi98t Ch. II, §8.4]. 
Write _ 

D = Normir/Q(Discx/F(Cii')) 

and write F = Q{\/d). Let K denote the reflex field of K. After possibly changing 
the CM-type of K,one can check that K = F{^2A + 2^ - B'^l5). Denote the relative 
discriminant of K/F by 

^K/F = Disc^/^(0^). 
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2. The Bruinier-Yang formula 

In this section, we describe the formula for (CM{K).Gi)e that was conjectured by Bruinier 
and Yang [BY06j and later proved by Yang |Yan] . One of the factors (which we denote by 
Rf^ip) in this intersection formula is multiplicative, so it makes sense to express it in terms 
of local factors over each prime. The key result of this section is Theorem 12.51 which does 
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exactly this. We start by recalling the necessary definitions to state the formula of Bruinier 
and Yang. 

2.1. Yang's Theorem. 

Definition 2.1. Let a F he an ideal. We define 

RR/pi^) ■= C I Norm^/^(n) = a}. 
Theorem 2.2. jYant Thm. 1.2] Assume that D and D are congruent to 1 modulo 4 and 
prime. Further assume that Ok = Of[{w + a/a + B^/D)/2] for some w G Op; this implies 
that D = — B^D. Then for each rational prime i, {Gi.CM{K))i/{logi) equals 

E E (2.1) 

n + S\/D ^rZ' 
2D 

\n\<Sy/5 



2D K/F 



where x is some integer, and 

^ . ( if [ splits in K 

^ 1/ U(^'^^) + mK/Fit^KM~')fW^) otherwise, 

where the sum ranges over prime ideals i of Op lying over I and f{i/i) denotes the inertial 
degree of I over Op. 

Remarks 2.3. 

(1) According to |KW89j . if — B^D is not a square, then K is primitive, so this 
assumption is certainly satisfied if D is prime or squarefree. 

(2) In Lemma 4-4 ^'^^ Corollary 4-5 of |BY06j . it is proved that under the assumptions 
of the above theorem, Norm(S)^^^) = D. 

(3) If D = 5 so that the only value for 6 is 1, then Yang |YanlO] showed that the same 
statement holds if the assumption that D is 1 modulo 4 and prime is replaced with 
the assumption that D is 1 modulo 4 and squarefree. 

2.2. A local interpretation of the Bruinier- Yang formula. 

Definition 2.4. Let p be a rational prime, and let a be an ideal in F. Then we define: 

fi(l + (-l)''p(°)) if p is inert in K 
Vp{a) + 1 if p is split in K 

1 otherwise. 



Let n E Z he such that \n\ < by D and such that := ( ""'"f n ^ ) divides T> ~}.~. Assume 
that Norm(2!)^^^) = D. Then we define 

5^5 - 



N := Norm(OTD^/j? 



4 



Theorem 2.5. Let i be a rational prime. If V\{^'D f^^p) = for all primes l\i in Op, then 
B'r!i{t) = 0. Assume that there exists exactly one prime i\i in Op such that v\{''yiD p- ^ p) > 
and this prime [ is unramified in K . Then 

( ^Jmif{l/l) n,|^,,^,ei^/^(p, ^^^k/f) if f is inert in K/F, 
B^{tj = } and Vi{m) = 1 mod 2 (2.2) 

otherwise. 

Proof. If vi{^D p^p) = for all primes t in Op lying over i, then p^p is not integral 

so it cannot be the norm of an integral ideal in Op. Thus, Rp^p{l~^''JlDp^p) = for all l\£ 
and so B<yi{i) = 0. 

Henceforth, assume that there exists exactly one prime l\i in Op such that V[{^'D p^p) > 
and this prime I is unramified in K. Then for any O^-prime I' ^ I, the ideal p^p 
is not integral and so Rp^p{l'~^^'D p^p) = 0. Thus we have the simplified expression 



if I splits in K 

+ l)Rp^p{m^p/pl-')fil/i) otherwise. 

To prove the local formula, first assume that I is not inert in K/F. By assumption, I is also 
unramified, so I must be split and B<yi{tj = 0. If t is inert in K/F and = V{{^D pjp) is 

even, then v^{['^mT!p|p) is odd. But since 1 is inert, the l-valuation of Normj^y^(*B) is even 
for any ideal «B of K. Thus R{{'^m^pjp) = = 

From now on, we may assume that 1 is inert in K and that V{{^) is odd. Recall that by 
definition, we have Rpip{{~^mi p^p) = #{a C Op \ Norm^/^(a) = m^p^pl"^}. 
By the unique factorization of ideals in (9^ and Op, 

Rp^p{mi)p^pn = nn^^/Mp"^^^''^^^'"^^ 

p p\p 

Since the ideal ^1)p^pl~^ is integral, we need only consider rational primes p such that p\N. 
Additionally, the factor at i is equal to 1, so 

p\N,py^e p\p 

Then it suffices to show that Hpip ^/fIp"'^^^"^^^^) = ^k/P^P^^'^ k/f) P ^ ^■ 

Let p\p be a prime ideal in Op. Let v = Vp{^Dp^p). If p is inert in K, then there is a 
unique prime *P lying over p and Norm|^y^(^) = p^. Thus if v is odd, there are no ideals 
in Op whose relative norm has p-adic valuation v, and if v is even, Rp^p{p") = 1. Now 

suppose that p splits in K. Then we can write p = ^1^2 and Normj^^^(^j) = p so the only 
ideals in Op with relative norm equal to are of the form *!p"^*!P2^, where rii + n2 = v and 
< ni, ria < v. Thus %/j?(p''^^^^^/^^) = + 1. Finally, if pOp = is ramified, then the 

only ideal in Op with relative norm p'^ is so Rp^p{p^''^'^^'^^^^) = 1. We observe that this 
matches the expression for ep^p{p, 9T) exactly. □ 
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3. The Lauter-Viray formula 



In this section, we describe the formula for {CM{K).Gi)i proved by the third and last 
author [LVj . As in the Bruinier-Yang formula, some of the factors in this intersection formula 
are multiplicative. The key result of this section is Theorem 13.31 where we show that the 
formula in |LVj has an expression involving products of local factors. 



3.1. A simplified version of the Lauter-Viray formula. Throughout, we assume that 
Ok is freely generated over Op and write rj for a generator, i.e.. Ok = Oplv]- We define 
integers ao,ai, /3o, /3i (depending on rj) satisfying 

Ttk/f{v) = "0 + ai ^ , and Norm/^/ir(?7) = /3o + Pi ^ ^ 2^ ' 

Let £ be a rational prime and let 5 be a positive integer such that D — 45 is a square. We 
define 

D'^ - D 

ck ■= al + aoaiD + ci\ ^ 4/3o - 

For any integer n such that 2D\{n + cj^) and is a positive integer, we define 

t„ := 

U ■■= «o + ^{D - VD - 45) ai. 



2D 



dx{n) 



n + Ck 
2D ' 



The curious reader may refer to |LVl §2] to see how these quantities arise. 

Theorem 3.1. |LV[ Thm. 2.10] Assume that for every 6 G Z>o O'nd G Z such that D — A6 

is a square, 2D\(n + ck5) and N := G Z>o, we have that i does not divide both 6 and 

N and that du{n) is a fundamental discriminant. Then (CM(i^).Gi)£/(log£) equals 



D-iS=n 2D\n+CKS 

(52Z)-n2e4DZ>o 



where Rd{A) = #{b C C»d = Z[^] : b invertible , Norm(b) = A], 



ve{N) if£|gcdK(n),4H), 



'0 if (rf, = -1 



/^(^) = { vi{N)+i Q^j^grwise ' ' ^'^'^'^''"1 for some 7^ 

2 o erwise, | 2#{p:p|gcd(d,A),p^Q otherwise, 

and (a, h)p denotes the Hilbert symbol at p. 



3.2. A local interpretation of the Lauter-Viray formula. 



Definition 3.2. Let Od = Define 

if p is inert in Od 
if p is split in Od 
if p\d and {d, —A)p = 1 
otherwise. 

Theorem 3.3. For any S, n, N which arise as in Theorem \3.1\ let du = du{n) and dx = 
dx{n). Let i be a prime that does not ramify in both Od^ o.nd Od^- Then 

{/^(^) Up\N,p^e (P, N) if i is inert in Od^ or Od, 
and v,iN) = 1 mod 2 (3.2) 
otherwise. 

Proof. Recall that the Hilbert symbol (a, b)p remains unchanged when a is multiplied by a 
norm from Qp{Vb). Thus since dxdu = 1^0TmQ^(^^^r^-j{txtu — '^txu'^ — 2\/—N) |LV[ Eqn. 3.6], 
we have 

(d.,-iV)^ = (4,-iV), 

for all primes p (including oo). 

Assume that I is split in Od^ or Od,, or that I is inert in Od^ or Od, and ve{N) is 
even. Then the right hand side of formula 13.21 is zero. If i is split in Od^ or Od,, then the 
Hilbert symbol {du, —N)^ = 1 because either du or dx is a square modulo Recall that 
if Q£(-y/a) is a nontrivial unramified extension of Q^, then (a, h)t = 1 if and only if Vi{b) 
is even ( |Ser70t Thm 1, p. 39]). Thus if £ is inert in Od^ or Od, and ve{N) is even then 
{du, —N)^ = 1. By jLVt Proof of Cor. 2.7] du is negative and so {du, —N)^ = — 1. Therefore, 
by the product formula, there exists some prime p ^ i such that {du, —N)^ = — 1. If p is 
ramified in Od^, then this is exactly the condition to have pd^{N) = 0, so the left hand side 
of formula 13.21 is also zero. If p is unramified in Od^, then since {du, —N)p = —1, p must be 
inert in Od^ and Vp{N) must be odd by the same argument as above. In this case, there is 
no ideal in Od^ with norm i~^N and so Rd^{i~^N) = 0. 

Since, by assumption, i does not ramify in both Od^ and Od,, the remaining case is 
when i is inert in Od^ or Od, and vi{N) is odd. If £ is inert in Od,, then since (. divides 
N = \{dxdu — {dxdu — 2t)^), £ is either inert or ramified in Od^- In either case, Rd^{i'^'') = 1 
for any non-negative integer k, so 

Rd.{r'N) = l[RdAf^^'-'''^)= n RdAf^^''^ 

p\N p\N,pf^e 
Then, by the same argument as in the proof of Theorem 12.51 

{1(1 + (-l)^f(^)) if p is inert in 
Vp{N) + l ifpissplitina„, 
1 ifpM„. 
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£d{p. A) 



Vp{A) 

2 





Furthermore, it follows from the definition of pd^ that 

v\An4.)\^ ifK,-iV), = -l. 
From these two local expansions, it is clear that 

if i is inert in Od^ or Od^ and vi{N) = 1 mod 2. This completes the proof. □ 

4. Relative integral bases 

In the previous section (and hence throughout the paper), a number of quantities, such as 
ao, «!, (3o, Pi and the others defined in terms of these, are expressed in a way that depends on 
the form of the integral basis {1, 77} for Op. In this section, we use a result of Spearman and 
Williams to determine the possible forms rj can take, thus narrowing down the possibilities 
for the other quantities given in Section 3. Throughout, we let A,Be |Z be such that 

A + B\fD is squarefree in Op and such that K = F{\/ A + B^/D). 

Lemma 4.1. Assume that D and D are 1 modulo 4 and squarefree and that Ok is freely 
generated over Op- Then a relative integral basis for K over F is {l,?]}, where 



1 + \/A + By/D 2B + y/D + 2^ A + B^/D 



ri = or ri 

'2 ' 4 

Furthermore, the latter case only occurs %fD = 5 mod 8 and A,B 

Proof. In |SW96] . Spearman and Williams give a necessary and sufficient condition for the 
existence of a relative integral basis for a quartic number field over a quadratic subfield. In 
addition, in the cases where a relative integral basis exists, they give an explicit description 
of such an integral basis. This lemma will follow almost immediately from their work. 

Spearman and Williams use the classification of quartic number fields with a quadratic 
subfield given in an earlier paper of Huard, Spearman, and Williams |HSW95j : there are 51 
cases with labels A1-A8, B1-B8, C1-C8, and D1-D27. If D = 5 mod 8, then the field falls in 
cases CI - C8 and ii D = l^mod 8 then the field falls in cases D1-D27. 

By |SW96l Thm 1], if D is squarefree, then K falls into one of nine cases, only five of 
which have the property that D = 1 mod 4. These five cases are C2, C7, D3, D16, or D20. 

If = 1 mod 8, then by |SW96l Thm 2], r/ = i+V^+^v^ _ 

Now consider the case when D = b mod 8. By |SW96l Thm 2 and p. 190], ii A,B E Z, 
then = i+V^+^vO^ and otherwise A, 5 G \ Z and = 2^+v^+Vah-bVd _ □ 

We will use this lemma to give simplified expressions for the quantities du{n), (i^(n), t^^v (n) 
defined in 331 



Proposition 4.2. Assume that D and D are 1 modulo 4 and squarefree and that Ok is 
freely generated over Op. Let 5 G Z>o he such that D — 46 is a square and let n E Z be such 
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that 2D divides (n + ck5) and such that ^^^^"^ is a positive integer. Then 



du{n) = 4(n) = A- BVD^6 - M„ - 2t,..v(n) = B6 - v™(^. 

Moreover, ck = ^ mod 2 anc? 2ci^ = 2 A mod -D. 

Proof. Lemma HTT] gives us two possible choices for rj. In each case, we can exphcitly give the 
values of f3i. If 77 = ^+V^+B^/ D_^ have ao = !,«! = 0, f3o = and f3i = — If 

r] = A+BV D^ ^^^^ ao = B - ^ , = 1, f3o = 4^!±f^, and f3i = 0. Using these 

values, we calculate du{n), d^in), and t^t^ — 2tj.uv(n) and find that they have the desired 
expressions in both cases. 

To prove the congruence conditions, recall that 

- D 

ck = C(o + a^aiD + af 4/3o — 2f3iD. 

If ao = 1 and ai = 0, then ck = ^ mod 2. Otherwise, D = 5 (mod 8), and so |(-D^ — D) = 
1 mod 2. Then, ck = (oq + aocn + c^i) mod 2. Since ai = 1 in this case, we see that, 
regardless of the parity of ao, ck = I mod 2. 

Calculating ck explicitly in each case, we see that ck is either equal to A oi A — ^. In 
either case, it is clear that 2ck = 2 A mod D. □ 

5. Equality of indices 

The remainder of the paper will focus on proving, under slightly weaker assumptions 
than those in Theorems 12.21 and 13.11 and without using Theorems 13.11 and 12. 2[ that the 
expressions (12. ip and (13.11) agree. Precisely, we will show: 

Theorem 5.1. Assume that: 

• D is prime, and hence congruent to 1 modulo 4, 

• D is squarefree and congruent to 1 modulo 4, 

• NoTm{D j^^p) = D, and 

• for all 6 G Zi>o such that D — 46 is a square, and for all n E 1j such that 2D\n + Ck6 
and 4D\5^ D —n^ , du{n) is a fundamental discriminant, i.e., du{n) is the discriminant 
of a quadratic field. 

Then (12.11) and (13. ip are equal. 

Corollary 5.2. Retain the assumptions of Theorem \5.1l Then, the Bruinier-Yang conjec- 
tural formula for (CM(ii').Gi)^ holds. 

Both formula (12.11) and (13.11) involve summands indexed by two integers denoted 6 and n. 
The index 6 ranges over the same quantities in both (12.11) and (13.11) . While it is not obvious, 
the same statement is true for the index n. 

Proposition 5.3. Assume that D and D are congruent to 1 modulo 4 and squarefree and 
that Norm(S)^y^) = D. Fix a positive integer 5 such that D — 45 is a square. Then for any 

-n'^ e 4DZ and n = -5ck (mod 2D) 
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if and only if 



2D K/F 

Remark 5.4. If we work with a different CM-type of K so that K = 

then the indices n are in one-to-one correspondance, but not necessarily equal. Indeed, the 
correspondence would be that 

6^5 -n^ e ADZ and n = -6ck (mod 2D) 

if and only if 

2D K/F 

Proof. We will need the factorization of {p) in Op for any p\D, so we present this first. 
Recall that A and B are chosen to be in |Z such that D = A^ — B^D. Since 2 A is a 
solution of — AD mod D and 2 \ D, for any p\D, we can factor (p) in Op as pip2 where 

pi = {2A - 2\fD,p) and p2 = {2A + 2^/d,p). Note that pi = p2 if and only if p\D as well 
as D. The norm of 2)^^^ is equal to D and since p\D one of pi or p2 must ramify in K/F. 
Since D is squarefree, at most one of pi or p2 ramifies and 'Sj^/p has pj-adic valuation at 



most 1. Recall that K = Q{y 2A + 2\/d), thus p2|Dj^/^. 

First assume that 6^D — G ADZ and that n = —6ck (mod 2D); we will show that 
^^2D^ ^ '^~ii/F' ^^'^'-^^ ~ divisible by 4, n must be congruent to 6 modulo 2 and 



thus "+ Y D |g integral. Further, since 2)^/^ is integral, so is { '^'^^^ ^ )D j^^p. To prove that 
"'~^2D^ ^ ■^^/F' ^^^^ show that every prime lying over p for p\D either divides "■'^^^^ or 
Dj^^p. In addition, if p also divides D, then we will show that the unique prime p lying over 

p divides 2)^/^ and B±i^/A^ Note that we have p > 2 since D and D are assumed to be 1 
modulo 4. 

By assumption, 2D\{n + Ci<-5) and by Proposition 14.21 we have 2ck = 2A mod D, so 

2n + 25\/d = -26A + 25 = mod pi 

and thus ^'pi ( "'^2D^ ) have already seen that p2\'^K/F- Therefore, ^~^2d^ ^ '^^/f' 

Now we prove the reverse direction. Assume that G D^^,-. Taking the absolute 

zu K/F 

norm, we have 

/ / n + 6\^ \ \ _ - 5^D 

^f/q\\ 2D j^F/Kj- 4^2 '^F/qi'^K/F) 



AD D 



Since iV^/Q(S)^./^) = D, we have 5^/) - 7^2 ^ ADZ. 
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To prove the congruence condition, we use the fact that p2\'^Kip- Since Norm(2) j^^^) is 

squarefree andp divides "'^'^^ D j^ip, this imphes that pi\{n + 5\/D) /2. Since 2n + 25\fD = 
2n + 26 A (mod pi), the integer 2n + 2SA is contained in pi and hence is modulo p, for 
all p\D. This implies that n + 6A = n + ckS = mod D. We have already shown that 
6^D — e 4Z, which implies that n = 6 (mod 2). Finally, by Proposition I4.2[ = 1 
(mod 2). Thus, n = Sck (mod 2), and the proof is complete. □ 

6. Equality of summands 

By the results of the previous section, both formula (12.11) and formula (13. ip sum over the 
same values 6 and n. Thus, to prove that the formulas agree, it suffices to show that for a 
fixed 6 and n, the corresponding summands of formula (12. ip and (13. ip are equal. The goal 
of the present section is to prove this equality. 

Throughout, we work with a fixed positive integer S and a fixed integer n such that 

D-AS = n, u + CkS = mod 2D, and iV := — G Z>o. 

For simplicity, we write du := du{n) and := d^^n). We let Od^ and Od^ denote the 
quadratic imaginary orders of discriminant du and d^ respectively. 
Precisely, in this section we prove: 

Theorem 6.1. Retain the assumptions from Theorem \5.1[ Then for any prime I, 

/.In /X 1 if [ is split in , 

where ^={^^^^^). 

In §6.11 we prove restrictions on the prime divisors of A^. These restrictions will prove 
useful in later sections, and they also allow us to give a simplified formula for /i(n). In §6.2[ 
we consider the splitting behavior in Od^ and Od^ of primes p dividing and relate it to 
the splitting behavior in K of primes p dividing 9T. We use this in §6.31 to show that for 
each prime p ^ the local factor at p in formula (12. 2p agrees with the local factor at p 
in formula (13. 2p . Finally, in §6.41 we explain how these ingredients come together to prove 
Theorem 16.11 

6.1. Reduction steps. 

Lemma 6.2. Retain the assumptions from Theorem \5.1i Then 5 and N = "^"^""^ are 
relatively prime. 

Proof. First suppose that p is an odd prime. If p divides both 6 and ^-j^^, P niust also 
divide n. Since D is prime and p < 5 < D, p cannot divide D, and so must divide 
duin) = ^1^2^^ This violates the hypothesis that du{n) is the discriminant of an imaginary 
quadratic field. 

Now let p = 2 and assume that p\N and p\S. Then since D — 45 is a square, D must be 

congruent to 1 modulo 8. Since D = A^ — B^D is 1 modulo 4, A and B must be integers 
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and A must be odd. By assumption, 8\6'^D — ri^ and 2|5, so n = 5 = 5^4 mod 4. Thus 
du{n) = 26{n + 6A)/D is modulo 16, which gives a contradiction. □ 

Proposition 6.3. Assume that D is squarefree and fix a prime p that does not divide 6. If 
p\N, then p cannot divide both du{n) anddx{n). 

Proof. Suppose p divides both du{n) and dx{n). Recall that we have 

5^b -n' = D {dx{n)du{n) - {tj^ - 2t..„v {n)Y) . (6.2) 

If ApD divides the left hand side of this equation, then p must also divide {txtu — '2txu^{n)). 
Using the formulations for this quantity, du{n), and dx{n) given in Proposition 14. 2[ we see 
that iip\duix), thenp|^^^^. Ifp|^^ and - 2t^„v(n)), then p|2E. But, if p divides 

all of these quantities, by considering the expression for dx{n) in Proposition 14. 2[ we see that 
p must also divide 2 A. Furthermore, if p = 2, then this argument can be strengthened to 
show that A and B are even integers. However, A and B must be relatively prime, because 
D = A^ — B^D is assumed to be squarefree. Thus, p cannot divide both du{n) and dx{n). □ 

Corollary 6.4. Retain the assumptions from Theorem \5.1[ Ifi\N, then n{n) = ^{ve{N) + l). 

6.2. Comparing valuations and splitting behavior. 

Lemma 6.5. Retain the assumptions from Theorem \5.1[ Letn G Z 6e such that 2D\{n+CKS) 
and that ^^^^^^ G Z>o- Let p be a prime that divides ^-j^^- Then there is a unique prime 

p G Op lying over p such that Vp ( ^^2D^ '^k/f^ ^"^ positive. This prime p is unramified in 

K, f{p/p) = 1, and we have 

'5'^D-n^\ (n + 5\/D\ ( n + 5^0 

-Jd- ) = [-^^ ) = \-^2^^~^rF^ 

Remark 6.6. This lemma shows that the assumptions in Theorem \5. 1\ imply the assumptions 
in Theorem \2.5\ 

Proof. By Lemma 16. 2[ p \ 5, so there is at most one prime in Op lying over p that divides 
^j^jg prime has inertial degree 1 over p. First consider the case when p \ D. Since 
Norm(S}^^^) = D, we have that for all p|p, p is unramified in K and Vp i ^^l'^ ~ 
(^n±iy^y As 

this completes the proof. 

Now consider the case when p\D. If p is ramified in F, then p\D. However, this contradicts 
the assumption that G pZ>o because D is squarefree and p ] 6. Thus p is split in 

F. Let pi and p2 denote the two primes lying over p. Since Norm(2!)^^^) = D and D 
is a prime, there is at most one prime lying over p that divides Dj^^p; we may assume 

12 



Vp 



that this prime is p2. Hence fp^ (^ ^^2D^ ^ k/f^ ~ ( ^^^2^ ^ ^ assumption 
on n and Proposition 15. 3^ ""'"^^^ 2) j^^p is integral, and thus fp^ ^ n+(5V^ ^ ^ q rpj_^jg 
turn imphes that ^{n + 5^/1d) is a p2-adic unit. Combining this with (16. 3p . we see that 
(^%^) = ^Pi (^^^S^) and pi t D if/i? as desired. □ 

Proposition 6.7. Retain the assumptions from Theorem 15. it Fix a prime p that divides 
^ and let p|p he the unique prime given in Lemma \6. 51 The prime ideal p sp/ite in K 

if and only if p splits in at least one of Od^ or Od^- Similarly, p is inert in K if and only if 
p is inert in at least one of Od^ or Od^ ■ 

Proof. By Lemma [6l2] and Proposition [6l3l P does not ramify in both Od^ and Od^- Therefore, 
if p is not spht in either Od^ or Od^ , then p is inert in at least one of Od^ and Od^ ■ Thus, 
the second claim of the lemma follows from the first claim. ^ 

As noted above, = . Since 4Dp\{6^D - n^), the product rf«4 is 

congruent to a square modulo p. Therefore, if p is split in one of Od^ or Od^, then p cannot 
be inert in the other order. If p > 2, the proof breaks into cases depending on whether or 
not p ramifies in Od^- Recall, du = Ml^^^. Assume that p\du and p > 2. Then, since 

p \ S (Lemma 16. 2p . 2n + 2A6 and n + 6\/d both have p-adic valuation strictly greater 

than Vp{D), and hence so does 2A — 2\fT) . This in turn implies that p divides 2B and so 



dx = A — B\J D — 45— ^("+'^^) = mod p. Recall that \j 2 A + 2 V-D generates the extension 
KjF. Consider the product 

(2A + 2Vd)4 = ■ A (modp). (6.4) 

Since D is squarefree, 4^4^ is a nonzero square modulo p. Then (16.41) implies that 2A^2\f^ 

and d^ are nonzero modulo p and that 2 A + 2\/d is a square modulo p if and only if dx is 
a square modulo p. This shows that p splits in K if and only if p splits in Od^ ■ 

Suppose that p \ d^ and p > 2. Then by the argument above, 2 A — 2\fT) is a p-adic 
unit. Thus, if p\2B, we must have that p|(2A + 2\fD). We will show that (2A + 2\fD)du 
is congruent to a nonzero square modulo p2?;p(2_B)+i 'jj^jg ghow that p splits in K if and 
only if p splits in Od^- 

Since 2A — 2\/d is a p-adic unit, Vp{2A + 2\fly) = 2vp{2B). By assumption, we also have 
that vJ ^^l^f^ ) is positive, so 



{2A + 2/0)52 ^!^/i±^ e p2-p(2B)+i. 

From this, we see that 

{2 A + 2y^)du = —{2A + 2^/d){2A - 2^3) = 5^{2Bf mod _ 
By Lemma [6.21 p \ 5, so we obtain our result. 
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Henceforth, we assume that p = 2. Suppose that A and B are half- integers, i.e., that 
2 A and 2B are odd integers. Then ^"+^V^ jg zero modulo p^, so du = 6"^ 2A4^n/(5 _ 
^2Mz^mod p3. Thus 

{2A + 2^/3)du = 5'^{2Bf mod pi 
Since 525 is odd, this shows that p splits in K if and only if p splits in Od^- 



If A and 5 are integers, then du is necessarily divisible by 2 and ^^2^ ^ ^f- Suppose 

that du = S mod 16 so = mod 2. Then = - "/'^+^ is modulo p. 

The discriminants D and D = A^ — B^D are 1 modulo 4, so A must be odd and B must be 



even. Since E A^ = D mod 8 and so B must be divisible by 4. Thus '^"'"^^ is a 

p-adic unit. Consider 

A + , -A + . , ^ 

d^ = h B\/D - 45 mod p"*. 



Since Norm( ~^+/^ ) = B'^D/A and D is 1 modulo 4, i;p( ~^+/^ ) = fp(5V4). If Vp{B) > 3, 



then = 4. mod pi If Vj,{B) = 2, then i'p( ~^+^ ) is also 2, so the sum + 

i?V 1^ — 4(5 has p-adic valuation at least 3. Therefore, in all cases, ^^^{^ = d^ mod p^ and 



so p splits in K if and only if p splits in Od^ ■ 

Finally we suppose that du = A mod 8. By assumption, du is fundamental which implies 
that '^'^^^^ is 3 modulo 4. Since d^ is a quadratic discriminant and congruent to A modulo 

4, A must be congruent to 1 modulo 4, so is 2 modulo 4. Both ^ii^^ and "/'^+''^ 

are p-adic uniformizers, hence their sum and difference both have p-adic valuation at least 
2. Moreover, at most one of the sum and difference have p-adic valuation exactly equal to 2. 



In particular, ^"'"^^ has positive valuation, so Vp{B'^ /A) must be positive (so i? is modulo 



4) and Vp{B'^/A) = fp( ^^^^ ). From this, we can see that p splits in K if 

D (6.5) 




2 

'A 



is a square modulo p^, and that p is inert in K if (16. 5p is a non-square modulo p'^. 
If 5 = 4 mod 8, then v^{^^^) = 2 and t;p( ~^+^"f > 3. Therefore 



— = n/6 = A+A mod p^, and 4. = A-BVD - A6-du/6 = yl+4+4 = A mod p^, 

so D ■ dx is equivalent to D{A^ + AA) modulo p"^. Since i5 — 45 is a square and 5 is 

odd, D must be 5 modulo 8. Thus D{A^ + AA) = 5(1 + 4) = 1 mod 8, so p splits in K if and 



only if p splits in Od,. \i B = Q mod 8, then vJ^^f^) > 3 and so = A mod pi We 
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also have 4 = A + 4 mod 8. Thus, as above, D ■ = D{A^ + AA) = 1 mod 

This completes the proof. □ 
6.3. Comparing and £j^/p- 

Proposition 6.8. Retain the assumptions from Theorem I5.il Let n G Z 6e such that 
2D\{n + CkS) and that ^-^^ G £Z>o. Fix a prime p^ i that divides N := ^^-f^. Then 



Proof. By Lemma 16751 there is a unique prime p lying over p such that fp(9T2) j^^^) is positive. 
Thus, 

( 1(1 + (-1)"^(^®a7f)) if p is inert in K 

^k/Ap^^^k/f) = \ M^^k/f) + 1 if P is split in K 

I 1 otherwise. 



Assume that p is inert in K. Then, by Proposition 16. 7[ p is inert in at least one of Od^ or 
Od^ ■ If p is inert in Od^ , then 



.{P,N) = hi + (-l)^^W) = 1(1 + (-i)'^^(^^K/^)) = e^^p{p,mT)^^p), 



as desired. (The middle equality follows from Lemma [6.51 ) If p is not inert in Od^, then p 
must be inert in Od^. The equality '^^^""'^ = ^ shows that dud^ is congruent 

to a square modulo p. Thus p is ramified in Od^- In addition, by Lemma [6.51 and since p^ 
does not divide du, 

1 =^p(aT%/^) = L 

Since is not a square modulo p and the valuation of is odd, it follows again from |Ser70| 
Ch III, Thm 1] that 

Thus SdSP.^-'N) = = i(l + (-l)'^^(^®^/^)) = £,^/^(p,9TD^./^). 

If p is not inert in /T, then, by Lemma [6751 p is split in K. By Proposition 16. 71 this implies 
that p is split in at least one of Od^ or Od^- If p is split in Od^, then 

£,„(p,iV) = Vp{N) + 1 = i;p(O^D^/^) + 1 = £^/^(p,DTD^/j?). 

If p is not split in O^^, then p is split in C^^, and the same arguments as above show that p 

' '^P\ AD 



is ramified in Vpi^^jf^) = 1. Furthermore 



and so Sd^ip, N) = 2 = Vp{N) + 1 = t'p(0T2)j^^^) + 1 = e^^p{p, ^D^^p). This completes the 
proof. □ 

15 



6.4. Proof of Theorem 16.11 Let [ denote the prime lying over i such that f [( "^2d ^ •^/c/f) 
is positive; this is unique by Lemma 16.51 If [ is spht in K, then by Theorem 12.51 the right- 
hand side of (16.1 p is zero. Additionally, by Proposition 16. 7^ if [ is split in K, then i is split 
in Od^ or Od^ . By Theorem 13.31 this implies that the left-hand side of (16. ip is zero. 

Since, by Lemma 16.51 I is unramified in K, we are left to consider the case when t is inert 
in K. By Proposition 16.71 this coincides with the case when i is inert in at least one of Od^ 
and Od^- First assume that is even; by Lemma |6.5[ v^{N) is also even. Then, by 

Theorems 12.51 and 13.31 both sides of (16. ip are 0. 

Now suppose that [ is inert in K and that is odd. By Lemma [6.51 if is a prime 

in F different from I, then \!~'^'*yiD is not integral. Therefore, R{\!~^^D ^^jp) = and the 
right-hand side of (16.11) reduces to 

Using Theorems 12.51 and 13. 3[ Corollary 16. 4[ and Lemma 16.51 we deduce 

p\N,p^l 

We apply Lemma 16.51 to show that ^'^^^"'"^ = ^^^^^"'"^ and Proposition 16.81 to give 

This completes the proof of Theorem 16.11 □ 

6.5. Proof of Theorem 15.11 Theorem 15.11 follows immediately from Proposition 15.31 and 
Theorem 16.11 □ 

6.6. Proof of Corollary 15.21 By Lemma [6.2^ the assumptions of Theorem 15.11 imply the 
assumptions of Theorem 13.11 Thus, Theorems 13.11 and 15.11 complete the proof. □ 
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